DV SSL/TLS Certificate for zerbits.de

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the zerbits.de DV SSL/TLS Certificate

This certificate with serial number 05:25:10:47:72:48:94:a9:b6:c6:34:f2:9e:4a:0b:e3:60:93 for zerbits.de was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for zerbits.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:25:10:47:72:48:94:a9:b6:c6:34:f2:9e:4a:0b:e3:60:93
Serial Number (int): 448173515853830602478353949639811319160979
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 23:02:eb:8f:9c:ca:d6:c4:31:d4:0d:64:e3:c3:bc:28:a2:81:6b:03
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 41:db:ac:35:fb:17:75:7a:74:66:b5:bb:46:4f:d8:31:f0:55:36:bb
Fingerprint (SHA-256): dc:94:fc:78:43:79:38:77:6d:27:24:20:39:36:e9:4d:52:30:0b:c8:fc:76:01:dc:a0:05:31:85:6e:88:5d:a2

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/20.crl

Check the revocation status for certificate zerbits.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for zerbits.de

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for zerbits.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 448173515853830602478353949639811319160979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-30 05:15:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-28 05:15:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zerbits.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806199696878940941146333929416132031689604774467031842336307094307000964494748973340202845735236619340840793517932304062123190519015024070990916289543712692176855769519943047537193668500011665752219961489512097153287813339660945014038187344768724302790124489129245811583559240310252136351579502827294450712073091353605811023289610026013496405453663482618710558875791469156361819922948845500794828596330202543050422260853371281337150848540456679405623397506682844962949069784116971767791554296124799376004340397819827760001446972400109339791950785707175535512899039407066268426077887173456074593967097866358434356470455556649777867727201093749155448851088503569817934105424524777077091946383189100874506091822881154729067037774831079141939903036894602108327653721139390533732218306311043814746209926629714577749841190545441779476734575485494685696366283891842687096940864258158319719231457934556270323491870578094781880455595042456659827520986718373498539553503766017148675507285598680838056634779655034982869854392958454647034882222703888301654911392646739460762172490534680790523418095906694178167724683406076115113046362717801942596233877201741569782411249234193795826119974161715525939506360667560607478001162385166105290454852789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2302eb8f9ccad6c431d40d64e3c3bc28a2816b03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zerbits.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zerbits.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/20.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001971fd3889500000403004830460221008604f04a1b23bf7383a978dc3a6cf359ea8591555eadb1182ecef1f44888d6f0022100c622f67420ad722019b31ef9b5fc0a222993a34cf1164d171ee3f6ca80d528f5007700dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a000001971fd388e2000004030048304602210088b78ecb2638e4ee69047dd48e5cacbbcceb92efabcd8a36054a24974c3fb83c022100fffc96abbff4bf37f5bf7efa7263472c926cb36eda0caeb3f2d1c49f13d8358c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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